[TechDon]

Hi all,

SIMPLE EMAIL SPOOFER PHP SCRIPT HERE

Just going through some of my files, found a pretty simple but useful script...

This allows you to send an email address, which on the surface can look to the recipient
like its being sent from any email address you specifiy within the code.

You would need to host this on a site and have PHP Mail enabled within your hosting CPanel.

This may be of use to someone...
Use responsibly 🤝

Code Below:

PHP Code


<?php

if($_POST['submit']){ //if submit is hit continue...

$spoof = (stripslashes(trim($_POST['spoof']))); //sanitises all the user input.
$target = (stripslashes(trim($_POST['target'])));
$reply =  (stripslashes(trim($_POST['reply'])));
$title = str_replace(array("\n", "\r"), '', stripslashes(trim($_POST['title'])));
$body  = (stripslashes(trim($_POST['body'])));

$headers  = "From: $spoof\r\n";
$headers .= "Reply-To: $reply\r\n";
$headers .= 'MIME-Version: 1.0' . "\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";

$regex="/^[a-zA-Z][\w \.\-]+[a-zA-Z0-9]@([a-zA-Z0-9][a-zA-Z0-9\-]*\.)+[a-zA-Z]{2,4}$/"; //Compares input email to this pattern to make sure it is a valid email.
if($spoof == "" || !preg_match($regex, $spoof)){

echo "<font color='red'><b> Error: No Spoof Email Address Specified  or Email Invalid!
</font></b>"; //error checking
exit;
}
elseif($target == "" || !preg_match($regex, $target)){
echo "<font color='red'><b> Error: No Target Email Address Specified or Email Invalid!
</font></b>";
exit;
}
elseif($reply == ""){
echo "<font color='red'><b> Error: No Reply Email Address Specified! </font></b>";
exit;
}
elseif($title == ""){
echo "<font color='red'><b> Error: No Email Subject Provided! </font></b>";
exit;
}
elseif($body == ""){
echo "<font color='red'><b> Error: No Email Message Provided! </font></b>";
exit;
}
else{
mail($target, $title, $body, $headers); //if there are no errors, send the email
echo "You Spoofed Email Message Has Been Sent!";
}
}
else{ //if submit wasn't hit, show the HTML form
?>
[b]<!--[/b] This is the CSS which makes the form look the way it does. -->
<html>
<title>E-mail Spoofer </title>
<body>
<style type="text/css">
body {
font-family: Arial;
font-size: .9em;
}
input {
background: #ECFDCE;
border: 1px solid green;
}
textarea {
background: #ECFDCE;
border: 1px solid green;
}
legend {
border: 1px solid #048DB4;
background: #F0F8FF;
}

fieldset {
border: 1px solid #048DB4;
width: 18.7em;
padding-left: 11px;
padding-bottom: 20px;
background: #F0F8FF;
}
[b]<!--[/b] This is the HTML form -->
</style>
<fieldset>
<legend>E-mail spoofer</legend>
<form action="" method="POST" >
Spoofed Email Address:<br>
<input type="text" size="40" name="spoof"><br>
Targets Email Address:<br>
<input type="text" size="40" name="target"><br>
Reply Email Address:<br>
<input type="text" size="40" name="reply"><br>
Message Subject:<br>
<input type="text"size="40" name="title"><br>
Email Message:<br>
<textarea rows="10" cols="30" name="body">
</textarea><br>
<input type="submit" value="Submit" name="submit">
<input type="reset" value="Clear">
</form>
</fieldset>
</body>
</html>
<?php
}
?>
</pre> 


[Brother Mouzone]

Thank you for this!

Looks a lot cleaner than other scripts floating around out there.

[bangkok101]

Thank you for sharing, do you know how we can send X amount of emails on that as well?

[OffMattz]

thanks a lot, now prove it

[bangkok101]

thanks a lot, now prove it

It works, i tried it.

[limainfinita]

either goes to spam or doesnt work..

[Brother Mouzone]

either goes to spam or doesnt work..

Assuming you have installed it correctly, you must be using a shitty free host: so of course it goes to spam.

I use it on my private host and I hit the Inbox every time: it's not the script its the server you host on.

[limainfinita]

Assuming you have installed it correctly, you must be using a shitty free host: so of course it goes to spam.

I use it on my private host and I hit the Inbox every time: it's not the script its the server you host on.

im actually using a cracked root.
But i will try a diferent one just to be sure.

[Brother Mouzone]

im actually using a cracked root.
But i will try a diferent one just to be sure.

Yea - you never know what kinda bad karma ends up being attached to cracked servers ....

Liek I said, I can punch into just about any inbox using my servers, which I know are clean. In fact, the only fail I've had is with Tutanota, which just blocks spoofs completely no matter where it comes from ...

[vivek007]

Thanks it's works with orther mailbox but doesn't works with google mail !

[CryPTer006]

very good script thanks bro....

[Exodi]

Epic, it works and it's very quick :)

[karencho7777]

hello can you tell me how to spoof "replay to" adress ? is there possible to do this?

[a1rm4x]

How can i add an attachment?